alt Hacker NewsDo you know about docker compose overwriting your carefully set firewall rules? That’s the other docker thing…
Replies
dotancohen • yesterday at 9:35 PM
Go on, what other docker things should we know?
Do you know about docker compose overwriting your carefully set firewall rules? That’s the other docker thing…
Go on, what other docker things should we know?
Absolutely. Docker is a boiling mess of baked-in convenience workarounds (ie vulns). It's an orchestration layer (like k8s with containers), not a real security boundary like VMs. OTOH, single-purpose VMs are basically just as easy these days and those can still pull in containers as needed.